symfony
diff --git a/‎src/Symfony/Component/Process/ExecutableFinder.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/ExecutableFinder.php
+11-2Lines changed: 11 additions & 2 deletions b/‎src/Symfony/Component/Process/ExecutableFinder.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/ExecutableFinder.php
+11-2Lines changed: 11 additions & 2 deletions
diff --git a/‎src/Symfony/Component/Process/PhpExecutableFinder.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/PhpExecutableFinder.php
+10-6Lines changed: 10 additions & 6 deletions b/‎src/Symfony/Component/Process/PhpExecutableFinder.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/PhpExecutableFinder.php
+10-6Lines changed: 10 additions & 6 deletions
diff --git a/‎src/Symfony/Component/Process/Tests/ExecutableFinderTest.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/Tests/ExecutableFinderTest.php
+21Lines changed: 21 additions & 0 deletions b/‎src/Symfony/Component/Process/Tests/ExecutableFinderTest.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Process/Tests/ExecutableFinderTest.php
+21Lines changed: 21 additions & 0 deletions
@@ -62,6 +62,9 @@ public function find(string $name, ?string $default = null, array $extraDirs = [
         }
         foreach ($suffixes as $suffix) {
             foreach ($dirs as $dir) {
+                if ('' === $dir) {
+                    $dir = '.';
+                }
                 if (@is_file($file = $dir.\DIRECTORY_SEPARATOR.$name.$suffix) && ('\\' === \DIRECTORY_SEPARATOR || @is_executable($file))) {
                     return $file;
                 }
@@ -72,8 +75,14 @@ public function find(string $name, ?string $default = null, array $extraDirs = [
             }
         }
 
-        $command = '\\' === \DIRECTORY_SEPARATOR ? 'where' : 'command -v --';
-        if (\function_exists('exec') && ($executablePath = strtok(@exec($command.' '.escapeshellarg($name)), \PHP_EOL)) && @is_executable($executablePath)) {
+        if (!\function_exists('exec') || \strlen($name) !== strcspn($name, '/'.\DIRECTORY_SEPARATOR)) {
+            return $default;
+        }
+
+        $command = '\\' === \DIRECTORY_SEPARATOR ? 'where %s 2> NUL' : 'command -v -- %s';
+        $execResult = exec(\sprintf($command, escapeshellarg($name)));
+
+        if (($executablePath = substr($execResult, 0, strpos($execResult, \PHP_EOL) ?: null)) && @is_executable($executablePath)) {
             return $executablePath;
         }
 
 
@@ -33,12 +33,16 @@ public function find(bool $includeArgs = true): string|false
     {
         if ($php = getenv('PHP_BINARY')) {
             if (!is_executable($php)) {
-                $command = '\\' === \DIRECTORY_SEPARATOR ? 'where' : 'command -v --';
-                if (\function_exists('exec') && $php = strtok(exec($command.' '.escapeshellarg($php)), \PHP_EOL)) {
-                    if (!is_executable($php)) {
-                        return false;
-                    }
-                } else {
+                if (!\function_exists('exec') || \strlen($php) !== strcspn($php, '/'.\DIRECTORY_SEPARATOR)) {
+                    return false;
+                }
+
+                $command = '\\' === \DIRECTORY_SEPARATOR ? 'where %s 2> NUL' : 'command -v -- %s';
+                $execResult = exec(\sprintf($command, escapeshellarg($php)));
+                if (!$php = substr($execResult, 0, strpos($execResult, \PHP_EOL) ?: null)) {
+                    return false;
+                }
+                if (!is_executable($php)) {
                     return false;
                 }
             }
 
@@ -111,6 +111,9 @@ public function testFindWithOpenBaseDir()
         }
     }
 
+    /**
+     * @runInSeparateProcess
+     */
     public function testFindBatchExecutableOnWindows()
     {
         if (\ini_get('open_basedir')) {
@@ -138,6 +141,24 @@ public function testFindBatchExecutableOnWindows()
         $this->assertSamePath($target.'.BAT', $result);
     }
 
+    /**
+     * @runInSeparateProcess
+     */
+    public function testEmptyDirInPath()
+    {
+        putenv(sprintf('PATH=%s:', \dirname(\PHP_BINARY)));
+
+        touch('executable');
+        chmod('executable', 0700);
+
+        $finder = new ExecutableFinder();
+        $result = $finder->find('executable');
+
+        $this->assertSame('./executable', $result);
+
+        unlink('executable');
+    }
+
     private function assertSamePath($expected, $tested)
     {
         if ('\\' === \DIRECTORY_SEPARATOR) {
Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,9 @@ public function find(string $name, ?string $default = null, array $extraDirs = [`
`62`	`62`	`}`
`63`	`63`	`foreach ($suffixes as $suffix) {`
`64`	`64`	`foreach ($dirs as $dir) {`
	`65`	`+ if ('' === $dir) {`
	`66`	`+ $dir = '.';`
	`67`	`+ }`
`65`	`68`	`if (@is_file($file = $dir.\DIRECTORY_SEPARATOR.$name.$suffix) && ('\\' === \DIRECTORY_SEPARATOR \|\| @is_executable($file))) {`
`66`	`69`	`return $file;`
`67`	`70`	`}`
`@@ -72,8 +75,14 @@ public function find(string $name, ?string $default = null, array $extraDirs = [`
`72`	`75`	`}`
`73`	`76`	`}`
`74`	`77`
`75`		`- $command = '\\' === \DIRECTORY_SEPARATOR ? 'where' : 'command -v --';`
`76`		`- if (\function_exists('exec') && ($executablePath = strtok(@exec($command.' '.escapeshellarg($name)), \PHP_EOL)) && @is_executable($executablePath)) {`
	`78`	`+ if (!\function_exists('exec') \|\| \strlen($name) !== strcspn($name, '/'.\DIRECTORY_SEPARATOR)) {`
	`79`	`+ return $default;`
	`80`	`+ }`
	`81`	`+`
	`82`	`+ $command = '\\' === \DIRECTORY_SEPARATOR ? 'where %s 2> NUL' : 'command -v -- %s';`
	`83`	`+ $execResult = exec(\sprintf($command, escapeshellarg($name)));`
	`84`	`+`
	`85`	`+ if (($executablePath = substr($execResult, 0, strpos($execResult, \PHP_EOL) ?: null)) && @is_executable($executablePath)) {`
`77`	`86`	`return $executablePath;`
`78`	`87`	`}`
`79`	`88`